fix(gpg): due to how apt keyring is managed, the generic gpg needs ap…

…t keyring access. fix #265
roddhjav · Dec 17, 2023 · ee328f7 · ee328f7
1 parent ca85373
commit ee328f7
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/apparmor.d/groups/gpg/gpg b/apparmor.d/groups/gpg/gpg
@@ -39,6 +39,10 @@ profile gpg @{exec_path} {
   owner @{user_projects_dirs}/**/gnupg/ rw,
   owner @{user_projects_dirs}/**/gnupg/** rwkl -> @{user_projects_dirs}/**/gnupg/**,
 
+  # only: apt
+  owner /etc/apt/keyrings/ rw,
+  owner /etc/apt/keyrings/** rwkl -> /etc/apt/keyrings/**,
+
   owner /var/lib/*/gnupg/ rw,
   owner /var/lib/*/gnupg/** rwkl -> /var/lib/*/gnupg/**,